added subroles and dpi association fixed all pages and migration

public/userarea/ajax/employee_profile/delete_ppe.php

@@ -1,26 +1,38 @@
 <?php
-require_once(__DIR__ . '/../hr_auth_check.php');
+include('../../include/headscript.php');
 
-header('Content-Type: application/json');
-
-if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
-    http_response_code(405);
-    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
-    exit;
-}
-
-$pdo = DBHandlerSelect::getInstance()->getConnection();
-
-$id = (int)($_POST['id'] ?? 0);
-if ($id <= 0) {
-    echo json_encode(['success' => false, 'message' => 'ID DPI non valido.']);
-    exit;
-}
+header('Content-Type: application/json; charset=utf-8');
 
 try {
-    $stmt = $pdo->prepare("DELETE FROM employee_ppe WHERE id = :id");
-    $stmt->execute(['id' => $id]);
-    echo json_encode(['success' => true]);
-} catch (Exception $e) {
-    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
+    $pdo = DBHandlerSelect::getInstance()->getConnection();
+
+    $id = (int)($_POST['id'] ?? 0);
+
+    if ($id <= 0) {
+        echo json_encode([
+            'success' => false,
+            'message' => 'ID DPI non valido.'
+        ]);
+        exit;
+    }
+
+    $stmt = $pdo->prepare("
+        UPDATE employee_ppe_items
+        SET status = 'returned',
+            updated_at = NOW()
+        WHERE id = ?
+    ");
+    $stmt->execute([$id]);
+
+    echo json_encode([
+        'success' => true,
+        'message' => 'DPI rimosso correttamente.'
+    ]);
+    exit;
+} catch (Throwable $e) {
+    echo json_encode([
+        'success' => false,
+        'message' => $e->getMessage()
+    ]);
+    exit;
 }