file repo, cc, auto-open

public/userarea/scadenzario/ajax/delete_attachment.php

@@ -23,20 +23,32 @@ try {
         exit;
     }
 
-    // Delete file
-    $filePath = __DIR__ . '/../attachments/' . $att['stored_name'];
-    if (file_exists($filePath)) {
-        unlink($filePath);
-    }
-
-    // Delete DB record
+    // Remove this link (DB record) first
     $pdo->prepare("DELETE FROM scad_deadline_attachments WHERE id = ?")->execute([$id]);
 
-    // History
-    $pdo->prepare("INSERT INTO scad_deadline_histories (deadline_id, user_id, action, notes) VALUES (?, ?, 'attachment_removed', ?)")
-        ->execute([$att['deadline_id'], $currentUserId, $att['original_name']]);
+    // The same physical file may be shared with other deadlines (carried forward on completion).
+    // Only unlink it when no other link references the same stored file.
+    $refStmt = $pdo->prepare("SELECT COUNT(*) FROM scad_deadline_attachments WHERE stored_name = ?");
+    $refStmt->execute([$att['stored_name']]);
+    $stillReferenced = (int)$refStmt->fetchColumn() > 0;
 
-    echo json_encode(['success' => true, 'message' => 'Allegato eliminato.']);
+    if ($stillReferenced) {
+        $action = 'attachment_unlinked';
+        $message = 'Collegamento rimosso. Il file è conservato (usato da un\'altra scadenza).';
+    } else {
+        $filePath = __DIR__ . '/../attachments/' . $att['stored_name'];
+        if (file_exists($filePath)) {
+            unlink($filePath);
+        }
+        $action = 'attachment_removed';
+        $message = 'Allegato eliminato.';
+    }
+
+    // History
+    $pdo->prepare("INSERT INTO scad_deadline_histories (deadline_id, user_id, action, notes) VALUES (?, ?, ?, ?)")
+        ->execute([$att['deadline_id'], $currentUserId, $action, $att['original_name']]);
+
+    echo json_encode(['success' => true, 'message' => $message]);
 
 } catch (Exception $e) {
     echo json_encode(['success' => false, 'message' => 'Errore: ' . $e->getMessage()]);