certificati aggiunti
This commit is contained in:
parent
f31a496b8c
commit
39fb15c649
Binary file not shown.
Binary file not shown.
Binary file not shown.
@ -18,6 +18,12 @@
|
||||
<div class="menu-title">Dashboard Utente</div>
|
||||
</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="my_certificates.php">
|
||||
<div class="parent-icon"><i class="bx bx-store"></i></div>
|
||||
<div class="menu-title">Certificati</div>
|
||||
</a>
|
||||
</li>
|
||||
<li>
|
||||
<a href="shop-school.php">
|
||||
<div class="parent-icon"><i class="bx bx-store"></i></div>
|
||||
|
||||
319
public/userarea/my_certificates.php
Normal file
319
public/userarea/my_certificates.php
Normal file
@ -0,0 +1,319 @@
|
||||
<?php
|
||||
session_start();
|
||||
include('include/headscript.php');
|
||||
|
||||
if (!isset($_SESSION['iduserlogin'])) {
|
||||
header('Location: login.php');
|
||||
exit;
|
||||
}
|
||||
|
||||
$iduserlogin = (int)$_SESSION['iduserlogin'];
|
||||
|
||||
$dbHandler = DBHandlerSelect::getInstance();
|
||||
$pdo = $dbHandler->getConnection();
|
||||
|
||||
// =============================================
|
||||
// CARICAMENTO CERTIFICATO (POST)
|
||||
// =============================================
|
||||
$success = $error = "";
|
||||
|
||||
if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_FILES['certificate']) && $_FILES['certificate']['error'] === UPLOAD_ERR_OK) {
|
||||
$file = $_FILES['certificate'];
|
||||
$allowed_ext = ['jpg', 'jpeg', 'png', 'pdf', 'heic', 'heif'];
|
||||
$ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
|
||||
|
||||
if (!in_array($ext, $allowed_ext)) {
|
||||
$error = "Formato non supportato. Ammessi: jpg, jpeg, png, pdf, heic, heif";
|
||||
} elseif ($file['size'] > 10 * 1024 * 1024) {
|
||||
$error = "File troppo grande (max 10MB)";
|
||||
} elseif (empty($_POST['expiry_date'])) {
|
||||
$error = "La data di scadenza è obbligatoria";
|
||||
} else {
|
||||
$upload_dir = __DIR__ . '/certificate/';
|
||||
if (!is_dir($upload_dir)) {
|
||||
mkdir($upload_dir, 0755, true);
|
||||
}
|
||||
|
||||
$safe_name = preg_replace('/[^a-zA-Z0-9\._-]/', '_', basename($file['name']));
|
||||
$new_filename = $iduserlogin . '-' . time() . '-' . $safe_name;
|
||||
$destination = $upload_dir . $new_filename;
|
||||
|
||||
if (move_uploaded_file($file['tmp_name'], $destination)) {
|
||||
$document_name = trim($_POST['document_name'] ?? 'certificato');
|
||||
if (empty($document_name)) $document_name = 'certificato';
|
||||
|
||||
$expiry_date = $_POST['expiry_date'];
|
||||
$notes = trim($_POST['notes'] ?? '');
|
||||
|
||||
$stmt = $pdo->prepare("
|
||||
INSERT INTO user_medical_certificates
|
||||
(user_id, filename, stored_path, document_name, expiry_date, notes, uploaded_at)
|
||||
VALUES (?, ?, ?, ?, ?, ?, NOW())
|
||||
");
|
||||
$stmt->execute([
|
||||
$iduserlogin,
|
||||
$file['name'],
|
||||
'certificate/' . $new_filename,
|
||||
$document_name,
|
||||
$expiry_date,
|
||||
$notes
|
||||
]);
|
||||
|
||||
$success = "Certificato caricato correttamente!";
|
||||
} else {
|
||||
$error = "Errore durante il salvataggio del file.";
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// =============================================
|
||||
// ELIMINAZIONE CERTIFICATO
|
||||
// =============================================
|
||||
if (isset($_GET['delete']) && is_numeric($_GET['delete'])) {
|
||||
$cert_id = (int)$_GET['delete'];
|
||||
|
||||
$stmt = $pdo->prepare("SELECT stored_path FROM user_medical_certificates WHERE id = ? AND user_id = ?");
|
||||
$stmt->execute([$cert_id, $iduserlogin]);
|
||||
$cert = $stmt->fetch();
|
||||
|
||||
if ($cert) {
|
||||
$full_path = __DIR__ . '/' . $cert['stored_path'];
|
||||
if (file_exists($full_path)) {
|
||||
@unlink($full_path);
|
||||
}
|
||||
|
||||
$stmt = $pdo->prepare("DELETE FROM user_medical_certificates WHERE id = ? AND user_id = ?");
|
||||
$stmt->execute([$cert_id, $iduserlogin]);
|
||||
|
||||
$success = "Certificato eliminato.";
|
||||
}
|
||||
}
|
||||
|
||||
// =============================================
|
||||
// LISTA CERTIFICATI
|
||||
// =============================================
|
||||
$stmt = $pdo->prepare("
|
||||
SELECT id, filename, stored_path, document_name, expiry_date, uploaded_at, notes
|
||||
FROM user_medical_certificates
|
||||
WHERE user_id = ?
|
||||
ORDER BY uploaded_at DESC
|
||||
");
|
||||
$stmt->execute([$iduserlogin]);
|
||||
$certificates = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
||||
|
||||
// Dati utente base (solo per titolo o saluto)
|
||||
$stmt = $pdo->prepare("SELECT first_name FROM auth_users WHERE id = ?");
|
||||
$stmt->execute([$iduserlogin]);
|
||||
$user = $stmt->fetch();
|
||||
?>
|
||||
|
||||
<!doctype html>
|
||||
<html lang="it">
|
||||
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>I miei Certificati Medici - Yogiboook</title>
|
||||
<?php include('cssinclude.php'); ?>
|
||||
<?php include('siteinfo.php'); ?>
|
||||
<style>
|
||||
.dropzone {
|
||||
border: 2px dashed #0d6efd;
|
||||
border-radius: 10px;
|
||||
padding: 50px 20px;
|
||||
text-align: center;
|
||||
background: #f8f9fa;
|
||||
transition: all 0.3s;
|
||||
cursor: pointer;
|
||||
}
|
||||
|
||||
.dropzone.dragover {
|
||||
background: #e7f1ff;
|
||||
border-color: #0dcaf0;
|
||||
}
|
||||
|
||||
.table th,
|
||||
.table td {
|
||||
vertical-align: middle;
|
||||
}
|
||||
|
||||
.expired {
|
||||
color: #dc3545;
|
||||
font-weight: bold;
|
||||
}
|
||||
|
||||
.file-link {
|
||||
color: #0d6efd;
|
||||
text-decoration: underline;
|
||||
cursor: pointer;
|
||||
}
|
||||
|
||||
.file-link:hover {
|
||||
color: #0056b3;
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
|
||||
<body>
|
||||
<div class="wrapper">
|
||||
<?php include('include/navbar.php'); ?>
|
||||
<?php include('include/topbar.php'); ?>
|
||||
|
||||
<div class="page-wrapper">
|
||||
<div class="page-content">
|
||||
<div class="container-xl">
|
||||
|
||||
<div class="card shadow">
|
||||
<div class="card-header bg-primary text-white">
|
||||
<h4 class="mb-0">I miei Certificati Medici</h4>
|
||||
</div>
|
||||
|
||||
<div class="card-body">
|
||||
|
||||
<?php if ($success): ?>
|
||||
<div class="alert alert-success alert-dismissible fade show">
|
||||
<?= htmlspecialchars($success) ?>
|
||||
<button type="button" class="btn-close" data-bs-dismiss="alert"></button>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
|
||||
<?php if ($error): ?>
|
||||
<div class="alert alert-danger alert-dismissible fade show">
|
||||
<?= htmlspecialchars($error) ?>
|
||||
<button type="button" class="btn-close" data-bs-dismiss="alert"></button>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
|
||||
<!-- FORM UPLOAD -->
|
||||
<form method="POST" enctype="multipart/form-data" id="uploadForm">
|
||||
<div class="row g-4 mb-5">
|
||||
<div class="col-lg-7">
|
||||
<div class="dropzone" id="dropzone">
|
||||
<i class="bx bx-cloud-upload bx-lg mb-3 text-primary"></i>
|
||||
<h5>Trascina qui il file oppure clicca per selezionare</h5>
|
||||
<p class="text-muted mb-1">Formati: jpg, jpeg, png, pdf, heic, heif (max 10 MB)</p>
|
||||
<input type="file" name="certificate" id="fileInput" accept=".jpg,.jpeg,.png,.pdf,.heic,.heif" hidden>
|
||||
</div>
|
||||
<div id="selectedFileName" class="mt-2 text-primary fw-bold small" style="min-height: 1.5em;"></div>
|
||||
</div>
|
||||
|
||||
<div class="col-lg-5">
|
||||
<div class="mb-3">
|
||||
<label class="form-label fw-bold">Nome documento <span class="text-danger">*</span></label>
|
||||
<input type="text" name="document_name" class="form-control" value="certificato" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label class="form-label fw-bold">Data scadenza <span class="text-danger">*</span></label>
|
||||
<input type="date" name="expiry_date" class="form-control" required>
|
||||
</div>
|
||||
<div class="mb-3">
|
||||
<label class="form-label">Note (opzionale)</label>
|
||||
<textarea name="notes" class="form-control" rows="2"></textarea>
|
||||
</div>
|
||||
<button type="submit" class="btn btn-primary w-100">
|
||||
<i class="bx bx-upload me-2"></i> Carica Certificato
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
</form>
|
||||
|
||||
<!-- TABELLA CERTIFICATI -->
|
||||
<?php if (empty($certificates)): ?>
|
||||
<div class="text-center py-5 text-muted">
|
||||
<i class="bx bx-file-blank bx-lg"></i>
|
||||
<h5 class="mt-3">Nessun certificato caricato</h5>
|
||||
</div>
|
||||
<?php else: ?>
|
||||
<h5 class="mt-5 mb-3">Certificati caricati (<?= count($certificates) ?>)</h5>
|
||||
<div class="table-responsive">
|
||||
<table class="table table-hover table-bordered align-middle">
|
||||
<thead class="table-light">
|
||||
<tr>
|
||||
<th>Data caricamento</th>
|
||||
<th>Nome documento / File</th>
|
||||
<th>Scadenza</th>
|
||||
<th>Note</th>
|
||||
<th>Azioni</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<?php foreach ($certificates as $cert):
|
||||
$file_url = '../' . $cert['stored_path'];
|
||||
$expired = $cert['expiry_date'] && strtotime($cert['expiry_date']) < time();
|
||||
?>
|
||||
<tr>
|
||||
<td><?= date('d/m/Y H:i', strtotime($cert['uploaded_at'])) ?></td>
|
||||
<td>
|
||||
<a href="<?= htmlspecialchars($file_url) ?>" target="_blank" class="file-link">
|
||||
<?= htmlspecialchars($cert['document_name']) ?>
|
||||
<br>
|
||||
<small class="text-muted">(<?= htmlspecialchars($cert['filename']) ?>)</small>
|
||||
</a>
|
||||
</td>
|
||||
<td class="<?= $expired ? 'expired' : '' ?>">
|
||||
<?= $cert['expiry_date'] ? date('d/m/Y', strtotime($cert['expiry_date'])) : '—' ?>
|
||||
<?= $expired ? '<br><small>SCADUTO</small>' : '' ?>
|
||||
</td>
|
||||
<td><?= $cert['notes'] ? nl2br(htmlspecialchars(substr($cert['notes'], 0, 100))) . (strlen($cert['notes']) > 100 ? '...' : '') : '—' ?></td>
|
||||
<td class="text-center">
|
||||
<a href="?delete=<?= $cert['id'] ?>" class="btn btn-sm btn-outline-danger delete-cert"
|
||||
onclick="return confirm('Vuoi davvero eliminare questo certificato?');">
|
||||
<i class="bx bx-trash"></i> Elimina
|
||||
</a>
|
||||
</td>
|
||||
</tr>
|
||||
<?php endforeach; ?>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<?php endif; ?>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<?php include('include/footer.php'); ?>
|
||||
</div>
|
||||
|
||||
<?php include('jsinclude.php'); ?>
|
||||
|
||||
<script>
|
||||
const dropzone = document.getElementById('dropzone');
|
||||
const fileInput = document.getElementById('fileInput');
|
||||
|
||||
dropzone.addEventListener('click', () => fileInput.click());
|
||||
|
||||
dropzone.addEventListener('dragover', (e) => {
|
||||
e.preventDefault();
|
||||
dropzone.classList.add('dragover');
|
||||
});
|
||||
|
||||
dropzone.addEventListener('dragleave', () => {
|
||||
dropzone.classList.remove('dragover');
|
||||
});
|
||||
|
||||
dropzone.addEventListener('drop', (e) => {
|
||||
e.preventDefault();
|
||||
dropzone.classList.remove('dragover');
|
||||
if (e.dataTransfer.files.length > 0) {
|
||||
fileInput.files = e.dataTransfer.files;
|
||||
document.getElementById('uploadForm').submit();
|
||||
}
|
||||
});
|
||||
fileInput.addEventListener('change', function() {
|
||||
const fileNameDiv = document.getElementById('selectedFileName');
|
||||
if (this.files.length > 0) {
|
||||
fileNameDiv.textContent = 'File selezionato: ' + this.files[0].name;
|
||||
fileNameDiv.classList.add('text-success');
|
||||
} else {
|
||||
fileNameDiv.textContent = '';
|
||||
fileNameDiv.classList.remove('text-success');
|
||||
}
|
||||
});
|
||||
</script>
|
||||
</body>
|
||||
|
||||
</html>
|
||||
@ -18,6 +18,11 @@ $stmt = $pdo->prepare("SELECT * FROM school_settings WHERE school_id = ?");
|
||||
$stmt->execute([$school_id]);
|
||||
$settings = $stmt->fetch();
|
||||
|
||||
// Ricarica con default se manca la colonna (per scuole vecchie)
|
||||
if ($settings && !array_key_exists('portal_purchases_enabled', $settings)) {
|
||||
$settings['portal_purchases_enabled'] = 1;
|
||||
}
|
||||
|
||||
$is_new = !$settings;
|
||||
|
||||
$success_message = $error = "";
|
||||
@ -48,6 +53,13 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
if (!empty($_POST['allow_drop_in'])) $product_types[] = 'drop_in';
|
||||
$allowed_product_types = !empty($product_types) ? implode(',', $product_types) : 'none';
|
||||
|
||||
|
||||
$portal_purchases_enabled = !empty($_POST['portal_purchases_enabled']) ? 1 : 0;
|
||||
|
||||
// Se acquisti portale disabilitati → forza anche propagate a 0
|
||||
$auto_propagate_on_purchase = $portal_purchases_enabled
|
||||
? (!empty($_POST['auto_propagate_on_purchase']) ? 1 : 0)
|
||||
: 0;
|
||||
// === SALVATAGGIO ===
|
||||
try {
|
||||
if ($is_new) {
|
||||
@ -55,8 +67,9 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
INSERT INTO school_settings (
|
||||
school_id, header_color, sidebar_color, payment_methods, currency_code, enable_notifications,
|
||||
allow_freeze_global, freeze_max_days_global, auto_propagate_on_purchase,
|
||||
allow_full_access_rebooking, allowed_product_types
|
||||
) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
||||
allow_full_access_rebooking, allowed_product_types,
|
||||
portal_purchases_enabled
|
||||
) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
||||
");
|
||||
$stmt->execute([
|
||||
$school_id,
|
||||
@ -69,7 +82,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$freeze_max_days_global,
|
||||
$auto_propagate_on_purchase,
|
||||
$allow_full_access_rebooking,
|
||||
$allowed_product_types
|
||||
$allowed_product_types,
|
||||
$portal_purchases_enabled
|
||||
]);
|
||||
$success_message = "Impostazioni create con successo!";
|
||||
} else {
|
||||
@ -77,7 +91,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
UPDATE school_settings SET
|
||||
header_color = ?, sidebar_color = ?, payment_methods = ?, currency_code = ?, enable_notifications = ?,
|
||||
allow_freeze_global = ?, freeze_max_days_global = ?, auto_propagate_on_purchase = ?,
|
||||
allow_full_access_rebooking = ?, allowed_product_types = ?
|
||||
allow_full_access_rebooking = ?, allowed_product_types = ?,
|
||||
portal_purchases_enabled = ?
|
||||
WHERE school_id = ?
|
||||
");
|
||||
$stmt->execute([
|
||||
@ -91,7 +106,9 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
$auto_propagate_on_purchase,
|
||||
$allow_full_access_rebooking,
|
||||
$allowed_product_types,
|
||||
$portal_purchases_enabled,
|
||||
$school_id
|
||||
|
||||
]);
|
||||
$success_message = "Impostazioni aggiornate con successo!";
|
||||
}
|
||||
@ -178,6 +195,17 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<div class="mt-4">
|
||||
<div class="form-check form-switch">
|
||||
<input class="form-check-input" type="checkbox" name="portal_purchases_enabled" id="portal_enabled"
|
||||
<?php echo ($settings['portal_purchases_enabled'] ?? 1) ? 'checked' : ''; ?>>
|
||||
<label class="form-check-label" for="portal_enabled">
|
||||
Acquisti pacchetti attivi nel portale YoGiBook
|
||||
</label>
|
||||
</div>
|
||||
<small class="form-text text-muted">Se disattivato, anche la propagazione automatica e i pagamenti vengono forzati a NO.</small>
|
||||
</div>
|
||||
<br>
|
||||
<div class="col-12 mb-4">
|
||||
<label class="form-label">Metodi di pagamento accettati</label>
|
||||
<div class="row g-3">
|
||||
@ -231,6 +259,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
<div class="mt-4">
|
||||
<div class="form-check form-switch">
|
||||
<input class="form-check-input" type="checkbox" name="allow_full_access_rebooking" id="full_access" <?php echo ($settings['allow_full_access_rebooking'] ?? 1) ? 'checked' : ''; ?>>
|
||||
@ -286,6 +316,45 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
||||
document.querySelector('input[name="freeze_max_days_global"]').disabled = !this.checked;
|
||||
});
|
||||
</script>
|
||||
<script>
|
||||
const portal = document.getElementById('portal_enabled');
|
||||
const propagate = document.getElementById('auto_propagate');
|
||||
const stripe = document.getElementById('pay_stripe');
|
||||
const paypal = document.getElementById('pay_paypal');
|
||||
const manual = document.getElementById('pay_manual');
|
||||
|
||||
function syncPortalState() {
|
||||
if (!portal) return;
|
||||
|
||||
const isEnabled = portal.checked;
|
||||
|
||||
// Propaga
|
||||
if (propagate) {
|
||||
propagate.disabled = !isEnabled;
|
||||
if (!isEnabled) propagate.checked = false;
|
||||
}
|
||||
|
||||
// Stripe + PayPal
|
||||
if (stripe) {
|
||||
stripe.disabled = !isEnabled;
|
||||
if (!isEnabled) stripe.checked = false;
|
||||
}
|
||||
if (paypal) {
|
||||
paypal.disabled = !isEnabled;
|
||||
if (!isEnabled) paypal.checked = false;
|
||||
}
|
||||
if (manual) {
|
||||
manual.disabled = !isEnabled;
|
||||
if (!isEnabled) manual.checked = false;
|
||||
}
|
||||
}
|
||||
|
||||
if (portal) {
|
||||
portal.addEventListener('change', syncPortalState);
|
||||
// Esegui subito (importante per il caricamento iniziale)
|
||||
syncPortalState();
|
||||
}
|
||||
</script>
|
||||
</body>
|
||||
|
||||
</html>
|
||||
Loading…
x
Reference in New Issue
Block a user