diff --git a/public/userarea/employee-profile.php b/public/userarea/employee-profile.php
new file mode 100644
index 0000000..1861576
--- /dev/null
+++ b/public/userarea/employee-profile.php
@@ -0,0 +1,1991 @@
+getConnection();
+
+/* ==========================================
+ PERMISSIONS
+ ========================================== */
+$isHrManager = Auth::user()->hasRole('Admin')
+ || Auth::user()->hasRole('Superuser')
+ || Auth::user()->hasRole('employee-hr')
+ || Auth::user()->hasRole('manager');
+
+/* ==========================================
+ RESOLVE TARGET EMPLOYEE
+ ========================================== */
+$requestedId = isset($_GET['id']) ? (int)$_GET['id'] : 0;
+$isOwnProfile = ($requestedId === 0);
+
+if ($isOwnProfile) {
+ $stmt = $pdo->prepare("SELECT id FROM employees WHERE auth_user_id = :uid LIMIT 1");
+ $stmt->execute(['uid' => $iduserlogin]);
+ $employeeId = (int)$stmt->fetchColumn();
+} else {
+ if (!$isHrManager) {
+ // Non-HR users can only view their own profile.
+ header('Location: employee-profile.php');
+ exit;
+ }
+ $employeeId = $requestedId;
+}
+
+/* ==========================================
+ LOAD EMPLOYEE DATA
+ ========================================== */
+$employee = null;
+if ($employeeId > 0) {
+ $stmt = $pdo->prepare("
+ SELECT e.*,
+ d.name AS department_name,
+ d.color AS department_color,
+ jr.name AS job_role_name,
+ au.first_name AS auth_first_name,
+ au.last_name AS auth_last_name,
+ au.email AS auth_email,
+ au.username AS auth_username,
+ au.avatar AS auth_avatar
+ FROM employees e
+ LEFT JOIN departments d ON d.id = e.department_id
+ LEFT JOIN job_roles jr ON jr.id = e.job_role_id
+ LEFT JOIN auth_users au ON au.id = e.auth_user_id
+ WHERE e.id = :id
+ LIMIT 1
+ ");
+ $stmt->execute(['id' => $employeeId]);
+ $employee = $stmt->fetch(PDO::FETCH_ASSOC) ?: null;
+}
+
+/* Authorization: own profile must match auth_user_id (defence in depth) */
+if (!$isHrManager && $employee && (int)$employee['auth_user_id'] !== (int)$iduserlogin) {
+ header('Location: employee-profile.php');
+ exit;
+}
+
+$canEdit = $isHrManager;
+
+/* ==========================================
+ DOCUMENTS (File Repository)
+ ========================================== */
+$documents = [];
+if ($employee) {
+ $stmt = $pdo->prepare("
+ SELECT d.*,
+ TRIM(CONCAT(COALESCE(au.first_name,''),' ',COALESCE(au.last_name,''))) AS uploader_name,
+ au.email AS uploader_email
+ FROM employee_documents d
+ LEFT JOIN auth_users au ON au.id = d.uploaded_by
+ WHERE d.employee_id = :eid
+ ORDER BY d.created_at DESC
+ ");
+ $stmt->execute(['eid' => $employeeId]);
+ $documents = $stmt->fetchAll(PDO::FETCH_ASSOC);
+}
+
+/* ==========================================
+ TRAINING HISTORY
+ ========================================== */
+$trainings = [];
+$trainingTopicsAll = [];
+$missingMandatoryTopics = [];
+if ($employee) {
+ $stmt = $pdo->prepare("
+ SELECT et.*,
+ tt.name AS topic_name,
+ tt.default_frequency_months AS topic_default_freq,
+ tt.default_reminder_days AS topic_default_rem,
+ (SELECT COUNT(*) FROM employee_training_attachments a WHERE a.training_id = et.id) AS attachments_count
+ FROM employee_trainings et
+ JOIN training_topics tt ON tt.id = et.training_topic_id
+ WHERE et.employee_id = :eid
+ ORDER BY et.completed_date DESC, et.id DESC
+ ");
+ $stmt->execute(['eid' => $employeeId]);
+ $trainings = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+ if ($canEdit) {
+ $trainingTopicsAll = $pdo->query("
+ SELECT id, name, default_frequency_months, default_reminder_days
+ FROM training_topics
+ WHERE is_active = 1
+ ORDER BY sort_order, name
+ ")->fetchAll(PDO::FETCH_ASSOC);
+ }
+
+ $missingStmt = $pdo->prepare("
+ SELECT tt.id, tt.name
+ FROM training_topics tt
+ WHERE tt.is_active = 1 AND tt.is_mandatory = 1
+ AND NOT EXISTS (
+ SELECT 1 FROM employee_trainings et
+ WHERE et.employee_id = :eid AND et.training_topic_id = tt.id
+ )
+ ORDER BY tt.sort_order, tt.name
+ ");
+ $missingStmt->execute(['eid' => $employeeId]);
+ $missingMandatoryTopics = $missingStmt->fetchAll(PDO::FETCH_ASSOC);
+}
+
+/* ==========================================
+ PPE (Assigned)
+ ========================================== */
+$ppeList = [];
+if ($employee) {
+ $stmt = $pdo->prepare("
+ SELECT *
+ FROM employee_ppe
+ WHERE employee_id = :eid
+ ORDER BY delivery_date DESC, created_at DESC
+ ");
+ $stmt->execute(['eid' => $employeeId]);
+ $ppeList = $stmt->fetchAll(PDO::FETCH_ASSOC);
+}
+
+/* ==========================================
+ DROPDOWN DATA FOR EDIT MODAL
+ ========================================== */
+$departments = $isHrManager
+ ? $pdo->query("SELECT id, name FROM departments WHERE is_active = 1 ORDER BY sort_order, name")->fetchAll(PDO::FETCH_ASSOC)
+ : [];
+$jobRoles = $isHrManager
+ ? $pdo->query("SELECT id, name FROM job_roles WHERE is_active = 1 ORDER BY sort_order, name")->fetchAll(PDO::FETCH_ASSOC)
+ : [];
+$authUsers = $isHrManager
+ ? $pdo->query("SELECT id, username, first_name, last_name, email, role_id FROM auth_users ORDER BY first_name, last_name")->fetchAll(PDO::FETCH_ASSOC)
+ : [];
+$rolesList = $isHrManager
+ ? $pdo->query("SELECT id, name, display_name FROM auth_roles ORDER BY display_name, name")->fetchAll(PDO::FETCH_ASSOC)
+ : [];
+
+/* ==========================================
+ HELPERS
+ ========================================== */
+function statusBadge(string $status): array {
+ switch ($status) {
+ case 'active': return ['label' => 'Attivo', 'class' => 'success'];
+ case 'inactive': return ['label' => 'Cessato', 'class' => 'secondary'];
+ case 'suspended': return ['label' => 'Sospeso', 'class' => 'warning'];
+ default: return ['label' => htmlspecialchars($status), 'class' => 'secondary'];
+ }
+}
+function fmtDate(?string $d): string {
+ if (!$d || $d === '0000-00-00') return '—';
+ $ts = strtotime($d);
+ return $ts ? date('d/m/Y', $ts) : '—';
+}
+function valOrDash($v): string {
+ $v = (string)($v ?? '');
+ return $v !== '' ? htmlspecialchars($v) : '—';
+}
+function categoryLabel(string $c): string {
+ switch ($c) {
+ case 'job_description': return 'Mansionario';
+ case 'contract': return 'Contratto';
+ case 'rules': return 'Regolamento';
+ case 'other': return 'Altro';
+ default: return htmlspecialchars($c);
+ }
+}
+function trainingStatus(?string $nextDue, ?int $reminderDays, ?int $topicDefaultRem): array {
+ if (!$nextDue) {
+ return ['code' => 'compliant', 'label' => 'Conforme', 'class' => 'success'];
+ }
+ $rem = $reminderDays !== null ? $reminderDays : ($topicDefaultRem !== null ? $topicDefaultRem : 30);
+ $today = new DateTime('today');
+ $due = DateTime::createFromFormat('Y-m-d', $nextDue);
+ if (!$due) return ['code' => 'compliant', 'label' => 'Conforme', 'class' => 'success'];
+ $daysLeft = (int)$today->diff($due)->format('%r%a');
+ if ($daysLeft < 0) return ['code' => 'expired', 'label' => 'Scaduto', 'class' => 'danger'];
+ if ($daysLeft <= $rem) return ['code' => 'due_soon', 'label' => 'Da aggiornare', 'class' => 'warning'];
+ return ['code' => 'compliant', 'label' => 'Conforme', 'class' => 'success'];
+}
+function fmtFileSize(?int $bytes): string {
+ if ($bytes === null || $bytes <= 0) return '—';
+ if ($bytes < 1024) return $bytes . ' B';
+ if ($bytes < 1024 * 1024) return number_format($bytes / 1024, 1) . ' KB';
+ if ($bytes < 1024 * 1024 * 1024) return number_format($bytes / 1024 / 1024, 1) . ' MB';
+ return number_format($bytes / 1024 / 1024 / 1024, 1) . ' GB';
+}
+?>
+
+
+
+
+
+
+
+
+
Profilo Dipendente - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Utente collegato
+
+
+
+
+
+
+
+ Nessun utente collegato
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Nessun documento
+
+
+
+
+
+
+
+
+
+
+ | Categoria |
+ Nome File |
+ Dimensione |
+ Caricato da |
+ Data |
+ Azioni |
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
+ |
+ |
+ |
+ |
+
+ ⬇️ Scarica
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Dim.:
+ Da:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Nessun DPI assegnato
+
+
+
+
+
+
+
+
+
+
+ | DPI |
+ Data Consegna |
+ Consegnato da |
+ Note |
+ Azioni |
+
+
+
+
+
+
+ |
+ |
+ |
+ |
+
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 🦺
+
+
+
+
+ Consegnato da:
+
+
+ Note:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ⚠️
+ obbligator:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Nessuna formazione registrata
+
+
+
+
+
+
+
+
+
+
+ | Corso |
+ Tipo |
+ Completato |
+ Prossimo agg. |
+ Stato |
+ Allegati |
+ Azioni |
+
+
+
+
+
+
+ |
+ |
+ |
+ |
+ |
+ |
+
+
+
+
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+ 📖
+
+
+
+ Tipo:
+ Completato:
+
+ Prossimo:
+
+ 0): ?>
+ Allegati:
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Carica nuovo allegato
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/public/userarea/employees.php b/public/userarea/employees.php
index 2b25e30..c80c278 100644
--- a/public/userarea/employees.php
+++ b/public/userarea/employees.php
@@ -17,16 +17,18 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
try {
if ($action === 'add') {
- // Codice originale per add
$employee_code = trim($_POST['employee_code'] ?? '');
$first_name = trim($_POST['first_name'] ?? '');
$last_name = trim($_POST['last_name'] ?? '');
+ $address = trim($_POST['address'] ?? '');
+ $phone = trim($_POST['phone'] ?? '');
+ $email = trim($_POST['email'] ?? '');
$department_id = $_POST['department_id'] !== '' ? (int)$_POST['department_id'] : null;
- $position = trim($_POST['position'] ?? '');
+ $job_role_id = ($_POST['job_role_id'] ?? '') !== '' ? (int)$_POST['job_role_id'] : null;
$hire_date = trim($_POST['hire_date'] ?? '');
$status = trim($_POST['status'] ?? 'active');
$auth_user_id = $_POST['auth_user_id'] !== '' ? (int)$_POST['auth_user_id'] : null;
- $role_id = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
+ $role_id = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
if ($first_name === '' || $last_name === '') {
echo json_encode([
@@ -35,23 +37,31 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
]);
exit;
}
-
+ if ($email !== '' && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
+ echo json_encode(['success' => false, 'message' => 'Email non valida.']);
+ exit;
+ }
if (!in_array($status, ['active', 'inactive', 'suspended'], true)) {
$status = 'active';
}
$sql = "INSERT INTO employees
- (auth_user_id, employee_code, first_name, last_name, department_id, position, hire_date, status, created_at, updated_at)
+ (auth_user_id, employee_code, first_name, last_name, address, phone, email,
+ department_id, job_role_id, hire_date, status, created_at, updated_at)
VALUES
- (:auth_user_id, :employee_code, :first_name, :last_name, :department_id, :position, :hire_date, :status, NOW(), NOW())";
+ (:auth_user_id, :employee_code, :first_name, :last_name, :address, :phone, :email,
+ :department_id, :job_role_id, :hire_date, :status, NOW(), NOW())";
$stmt = $pdo->prepare($sql);
$stmt->execute([
'auth_user_id' => $auth_user_id,
'employee_code' => $employee_code !== '' ? $employee_code : null,
'first_name' => $first_name,
'last_name' => $last_name,
+ 'address' => $address !== '' ? $address : null,
+ 'phone' => $phone !== '' ? $phone : null,
+ 'email' => $email !== '' ? $email : null,
'department_id' => $department_id,
- 'position' => $position !== '' ? $position : null,
+ 'job_role_id' => $job_role_id,
'hire_date' => $hire_date !== '' ? $hire_date : null,
'status' => $status
]);
@@ -74,17 +84,19 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
}
if ($action === 'edit') {
- // Codice originale per edit
- $id = (int)($_POST['id'] ?? 0);
+ $id = (int)($_POST['id'] ?? 0);
$employee_code = trim($_POST['employee_code'] ?? '');
$first_name = trim($_POST['first_name'] ?? '');
$last_name = trim($_POST['last_name'] ?? '');
+ $address = trim($_POST['address'] ?? '');
+ $phone = trim($_POST['phone'] ?? '');
+ $email = trim($_POST['email'] ?? '');
$department_id = $_POST['department_id'] !== '' ? (int)$_POST['department_id'] : null;
- $position = trim($_POST['position'] ?? '');
+ $job_role_id = ($_POST['job_role_id'] ?? '') !== '' ? (int)$_POST['job_role_id'] : null;
$hire_date = trim($_POST['hire_date'] ?? '');
$status = trim($_POST['status'] ?? 'active');
$auth_user_id = $_POST['auth_user_id'] !== '' ? (int)$_POST['auth_user_id'] : null;
- $role_id = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
+ $role_id = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
if ($id <= 0) {
echo json_encode(['success' => false, 'message' => 'Invalid employee ID.']);
@@ -98,7 +110,10 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
]);
exit;
}
-
+ if ($email !== '' && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
+ echo json_encode(['success' => false, 'message' => 'Email non valida.']);
+ exit;
+ }
if (!in_array($status, ['active', 'inactive', 'suspended'], true)) {
$status = 'active';
}
@@ -108,8 +123,11 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
employee_code = :employee_code,
first_name = :first_name,
last_name = :last_name,
+ address = :address,
+ phone = :phone,
+ email = :email,
department_id = :department_id,
- position = :position,
+ job_role_id = :job_role_id,
hire_date = :hire_date,
status = :status,
updated_at = NOW()
@@ -120,8 +138,11 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
'employee_code' => $employee_code !== '' ? $employee_code : null,
'first_name' => $first_name,
'last_name' => $last_name,
+ 'address' => $address !== '' ? $address : null,
+ 'phone' => $phone !== '' ? $phone : null,
+ 'email' => $email !== '' ? $email : null,
'department_id' => $department_id,
- 'position' => $position !== '' ? $position : null,
+ 'job_role_id' => $job_role_id,
'hire_date' => $hire_date !== '' ? $hire_date : null,
'status' => $status,
'id' => $id
@@ -223,6 +244,7 @@ $sql = "
SELECT e.*,
d.name AS department_name,
d.color AS department_color,
+ jr.name AS job_role_name,
au.email AS user_email,
au.role_id AS user_role_id,
ar.display_name AS role_display_name,
@@ -230,6 +252,7 @@ $sql = "
CONCAT(COALESCE(au.first_name, ''), ' ', COALESCE(au.last_name, '')) AS user_fullname
FROM employees e
LEFT JOIN departments d ON e.department_id = d.id
+ LEFT JOIN job_roles jr ON jr.id = e.job_role_id
LEFT JOIN auth_users au ON e.auth_user_id = au.id
LEFT JOIN auth_roles ar ON ar.id = au.role_id
ORDER BY e.id DESC
@@ -237,6 +260,11 @@ $sql = "
$stmtEmployees = $pdo->query($sql);
$employees = $stmtEmployees->fetchAll(PDO::FETCH_ASSOC);
+// Job roles for the dropdown
+$jobRoles = $pdo->query("
+ SELECT id, name FROM job_roles WHERE is_active = 1 ORDER BY sort_order, name
+")->fetchAll(PDO::FETCH_ASSOC);
+
// Users list for select
$sqlUsers = "
SELECT id,
@@ -297,7 +325,6 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
-
@@ -415,7 +442,7 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
-
+
@@ -448,14 +475,15 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
| ID |
- Code |
- Name |
- Department |
- Position |
- Hire Date |
- Status |
- Linked User |
- Actions |
+ Codice |
+ Nome |
+ Contatti |
+ Reparto |
+ Mansione |
+ Data Assunzione |
+ Stato |
+ Utente collegato |
+ Azioni |
@@ -484,7 +512,24 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
|
|
- |
+
+
+
+
+ |
+
+
+
+ ✉️
+
+
+
+
+ 📞
+
+
+ -
+ |
@@ -494,7 +539,7 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
-
|
- |
+ |
|
@@ -510,7 +555,10 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
data-first_name=""
data-last_name=""
data-department_id=""
- data-position=""
+ data-job_role_id=""
+ data-address=""
+ data-phone=""
+ data-email=""
data-hire_date=""
data-status=""
data-auth_user_id=""
@@ -560,26 +608,42 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
|
 ?>)
+
+
+
+