typhon

2026-06-19 11:13:37 +02:00
parent 89d8ad114b
commit aad528d15b
18 changed files with 2991 additions and 2845 deletions
@@ -1,51 +1,84 @@
 <?php
-require_once __DIR__ . '/../../includes/db.php';
+require __DIR__ . '/../../includes/auth.php';
+require __DIR__ . '/../../includes/db.php';
+require_login();
+
 header('Content-Type: application/json');

 $action = $_POST['action'] ?? $_GET['action'] ?? '';

 try {
-    // 1. Lire toutes les fêtes
-    if ($action === 'get_occasions') {
-        $stmt = $pdo->query("SELECT * FROM pf_gift_occasions ORDER BY month_date ASC, id ASC");
-        echo json_encode(['ok' => true, 'data' => $stmt->fetchAll(PDO::FETCH_ASSOC)]);
+    if ($action === 'get_all') {
+        $occ = $pdo->query("SELECT * FROM pf_gift_occasions ORDER BY sort_order ASC, id ASC")->fetchAll();
+        $proches = $pdo->query("SELECT * FROM pf_people WHERE role IN ('proche_adulte', 'proche_enfant') ORDER BY name ASC")->fetchAll();
+        echo json_encode(['success' => true, 'data' => ['occasions' => $occ, 'proches' => $proches]]);
        exit;
    }

-    // 2. Ajouter une nouvelle fête (Renvoie l'ID pour rafraîchir la modale)
-    if ($action === 'add_occasion') {
-        $name = trim($_POST['name'] ?? '');
-        $month_date = trim($_POST['month_date'] ?? '');
+    if ($action === 'save_occasion') {
+        $id = !empty($_POST['id']) ? (int)$_POST['id'] : null;
+        $name = trim($_POST['name']);
+        $icon = trim($_POST['icon']) ?: '🎁';
+        $month_date = trim($_POST['month_date']) ?: null;
        
-        if (empty($name)) throw new Exception("Name required");
-        
-        $code = strtoupper(preg_replace('/[^A-Za-z0-9]/', '', $name));
-        $code = substr($code, 0, 20);
+        if (empty($name)) throw new Exception("Le nom est obligatoire.");

-        $stmt = $pdo->prepare("INSERT INTO pf_gift_occasions (code, name, month_date, is_active) VALUES (?, ?, ?, 1)");
-        $stmt->execute([$code, $name, $month_date ?: null]);
-        
-        echo json_encode(['ok' => true]);
-        exit;
-    }
-
-    // 3. Sauvegarde globale des cases à cocher
-    if ($action === 'save_toggles') {
-        $states = json_decode($_POST['states'] ?? '[]', true);
-        if (is_array($states)) {
-            $stmt = $pdo->prepare("UPDATE pf_gift_occasions SET is_active = ? WHERE id = ?");
-            foreach ($states as $item) {
-                $stmt->execute([(int)$item['state'], (int)$item['id']]);
-            }
+        if ($id) {
+            $stmt = $pdo->prepare("UPDATE pf_gift_occasions SET name=?, icon=?, month_date=? WHERE id=?");
+            $stmt->execute([$name, $icon, $month_date, $id]);
+        } else {
+            $code = 'CUST_' . strtoupper(substr(preg_replace('/[^A-Za-z0-9]/', '', $name), 0, 4)) . '_' . rand(100, 999);
+            $stmt = $pdo->prepare("INSERT INTO pf_gift_occasions (code, name, icon, month_date) VALUES (?, ?, ?, ?)");
+            $stmt->execute([$code, $name, $icon, $month_date]);
        }
-        echo json_encode(['ok' => true]);
+        echo json_encode(['success' => true]);
        exit;
    }

-    throw new Exception("Action inconnue.");
+    if ($action === 'delete_occasion') {
+        $id = (int)$_POST['id'];
+        $pdo->prepare("DELETE FROM pf_gift_occasions WHERE id=?")->execute([$id]);
+        echo json_encode(['success' => true]);
+        exit;
+    }
+
+    if ($action === 'toggle_occasion') {
+        $id = (int)$_POST['id'];
+        $state = (int)$_POST['state'];
+        $pdo->prepare("UPDATE pf_gift_occasions SET is_active=? WHERE id=?")->execute([$state, $id]);
+        echo json_encode(['success' => true]);
+        exit;
+    }
+
+    if ($action === 'save_proche') {
+        $id = !empty($_POST['id']) ? (int)$_POST['id'] : null;
+        $name = trim($_POST['name']);
+        $role = $_POST['role'];
+        
+        if (empty($name)) throw new Exception("Le nom est obligatoire.");
+        if (!in_array($role, ['proche_adulte', 'proche_enfant'])) throw new Exception("Rôle invalide.");
+
+        if ($id) {
+            // Sécurité : on s'assure qu'on modifie bien un proche et pas un parent
+            $stmt = $pdo->prepare("UPDATE pf_people SET name=?, role=? WHERE id=? AND role IN ('proche_adulte', 'proche_enfant')");
+            $stmt->execute([$name, $role, $id]);
+        } else {
+            $stmt = $pdo->prepare("INSERT INTO pf_people (name, role, color) VALUES (?, ?, '#94a3b8')");
+            $stmt->execute([$name, $role]);
+        }
+        echo json_encode(['success' => true]);
+        exit;
+    }
+
+    if ($action === 'delete_proche') {
+        $id = (int)$_POST['id'];
+        $stmt = $pdo->prepare("DELETE FROM pf_people WHERE id=? AND role IN ('proche_adulte', 'proche_enfant')");
+        $stmt->execute([$id]);
+        echo json_encode(['success' => true]);
+        exit;
+    }

 } catch (Exception $e) {
-    http_response_code(400);
-    echo json_encode(['ok' => false, 'error' => $e->getMessage()]);
-}
-?>
+    echo json_encode(['success' => false, 'error' => $e->getMessage()]);
+    exit;
+}