Tiny File Manager | RdvController.php

File: RdvController.php
Full Path: /home/mata8712/public_html/on-me-trouve/crm/controllers/RdvController.php
File size: 15.03 KB
MIME-type: text/x-php
Charset: utf-8
Delete Open Edit Advanced Editor Back
<?php
// controllers/RdvController.php
require_once __DIR__ . '/../require_login.php';
header('Content-Type: application/json');
require_once __DIR__ . '/../models/RdvModel.php';
require_once __DIR__ . '/../models/Database.php';
require_once __DIR__ . '/../models/ReglagesEmails.php';
require_once __DIR__ . '/../models/ReglagesEntreprise.php';
require_once __DIR__ . '/../models/RdvInviteModel.php';
require_once __DIR__ . '/../models/ProjetDocumentLink.php';

function crm_ical_escape(string $text): string {
    $text = str_replace(["\\", ";", ","], ["\\\\", "\;", "\,"], $text);
    $text = preg_replace("/(\r\n|\r|\n)/", "\\n", $text);
    return $text;
}

function crm_send_rdv_invitations(array $rdv): void {
    $raw = trim((string)($rdv['invite_emails'] ?? ''));
    if ($raw === '') {
        return;
    }
    $parts = preg_split('/[;,]+/', $raw);
    $recipients = [];
    foreach ($parts as $p) {
        $email = trim($p);
        if ($email !== '' && filter_var($email, FILTER_VALIDATE_EMAIL)) {
            $recipients[] = str_replace(["\r", "\n"], '', $email);
        }
    }
    if (empty($recipients)) {
        return;
    }

    $titre = (string)($rdv['titre'] ?? 'Rendez-vous');
    $description = (string)($rdv['description'] ?? '');
    $date = (string)($rdv['date'] ?? '');
    $heure = $rdv['heure'] ?? null;
    $duree = isset($rdv['duree']) ? (int)$rdv['duree'] : null;

    if ($date === '') {
        return;
    }

    $uid = 'rdv-' . ($rdv['id'] ?? uniqid('', true)) . '@crm-standalone';
    $dtstamp = gmdate('Ymd\THis\Z');

    $dtstartLine = '';
    $dtendLine = '';
    if ($heure) {
        $start = DateTime::createFromFormat('Y-m-d H:i:s', $date . ' ' . $heure);
        if (!$start) {
            $start = DateTime::createFromFormat('Y-m-d H:i', $date . ' ' . substr($heure, 0, 5));
        }
        if (!$start) {
            $start = new DateTime($date . ' 09:00:00');
        }
        $durationMinutes = $duree && $duree > 0 ? $duree : 30;
        $end = clone $start;
        $end->modify('+' . $durationMinutes . ' minutes');
        $dtstartLine = 'DTSTART:' . $start->format('Ymd\THis');
        $dtendLine = 'DTEND:' . $end->format('Ymd\THis');
    } else {
        $ymd = str_replace('-', '', $date);
        $dtstartLine = 'DTSTART;VALUE=DATE:' . $ymd;
        $dtendLine = 'DTEND;VALUE=DATE:' . $ymd;
    }

    $summary = crm_ical_escape($titre);
    $desc = crm_ical_escape($description);

    $ics = "BEGIN:VCALENDAR\r\n" .
        "VERSION:2.0\r\n" .
        "PRODID:-//CRM Standalone//FR\r\n" .
        "METHOD:REQUEST\r\n" .
        "BEGIN:VEVENT\r\n" .
        'UID:' . $uid . "\r\n" .
        'DTSTAMP:' . $dtstamp . "\r\n" .
        $dtstartLine . "\r\n" .
        $dtendLine . "\r\n" .
        'SUMMARY:' . $summary . "\r\n" .
        'DESCRIPTION:' . $desc . "\r\n" .
        "END:VEVENT\r\n" .
        "END:VCALENDAR\r\n";

    $db = Database::getInstance()->getConnection();
    $reglagesEmails = new ReglagesEmails($db);
    $smtp = $reglagesEmails->get();
    $reglagesEntreprise = new ReglagesEntreprise($db);
    $ent = $reglagesEntreprise->get();

    $inviteModel = new RdvInviteModel($db);
    $tokensByEmail = $inviteModel->createOrRefreshInvites((int)($rdv['id'] ?? 0), $recipients);

    $fromEmail = trim($ent['email'] ?? ($smtp['smtp_user'] ?? ''));
    $fromName = trim(($smtp['from_name'] ?? '') !== '' ? $smtp['from_name'] : ($ent['nom'] ?? 'CRM'));
    $fromEmail = str_replace(["\r", "\n"], '', $fromEmail);
    $fromName = str_replace(["\r", "\n"], ' ', $fromName);

    $headers = [];
    if ($fromEmail !== '') {
        if ($fromName !== '') {
            $headers[] = 'From: ' . (function_exists('mb_encode_mimeheader') ? mb_encode_mimeheader($fromName) : $fromName) . ' <' . $fromEmail . '>';
        } else {
            $headers[] = 'From: ' . $fromEmail;
        }
        $headers[] = 'Reply-To: ' . $fromEmail;
    }
    $headers[] = 'MIME-Version: 1.0';

    $boundary = '=_CRM_RDV_' . md5((string) microtime(true));
    $headers[] = 'Content-Type: multipart/mixed; boundary="' . $boundary . '"';

    if (!empty($smtp['smtp_host'])) {
        @ini_set('SMTP', (string) $smtp['smtp_host']);
    }
    if (!empty($smtp['smtp_port'])) {
        @ini_set('smtp_port', (string) $smtp['smtp_port']);
    }
    if (!empty($fromEmail)) {
        @ini_set('sendmail_from', $fromEmail);
    }

    $subject = 'Invitation : ' . $titre;
    $headersStr = implode("\r\n", $headers);

    foreach ($recipients as $email) {
        if (!isset($tokensByEmail[$email])) {
            continue;
        }
        $token = $tokensByEmail[$email];
        $scheme = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on') ? 'https://' : 'http://';
        $host = $_SERVER['HTTP_HOST'] ?? '';
        $scriptDir = dirname($_SERVER['SCRIPT_NAME'] ?? '/');
        // On remonte d'un niveau si le script courant est dans /controllers
        $appBaseDir = rtrim(dirname($scriptDir), '/');
        if ($appBaseDir === '' || $appBaseDir === '.') {
            $appBaseDir = '';
        }
        $baseUrl = $scheme . $host . $appBaseDir;

        $acceptUrl = $baseUrl . '/controllers/RdvInviteController.php?token=' . urlencode($token) . '&action=accept';
        $refuseUrl = $baseUrl . '/controllers/RdvInviteController.php?token=' . urlencode($token) . '&action=refuse';

        // Corps texte brut (fallback universel)
        $plain = '';
        $plain .= "Bonjour,\r\n\r\n";
        $plain .= "Vous êtes invité à un rendez-vous : " . $titre . "\r\n";
        $plain .= "Date : " . $date . ($heure ? (' à ' . $heure) : '') . "\r\n";
        if ($duree && $duree > 0) {
            $plain .= "Durée : " . $duree . " minutes\r\n";
        }
        if ($description !== '') {
            $plain .= "\r\nDescription :\r\n" . $description . "\r\n";
        }
        $plain .= "\r\nPour répondre à cette invitation :\r\n";
        $plain .= "- Accepter : " . $acceptUrl . "\r\n";
        $plain .= "- Refuser : " . $refuseUrl . "\r\n\r\n";
        $plain .= "Vous pouvez ajouter ce rendez-vous à votre calendrier en ouvrant la pièce jointe.\r\n\r\n";

        // Corps HTML avec boutons visibles (notamment dans Gmail)
        $acceptUrlHtml = htmlspecialchars($acceptUrl, ENT_QUOTES, 'UTF-8');
        $refuseUrlHtml = htmlspecialchars($refuseUrl, ENT_QUOTES, 'UTF-8');
        $html = '';
        $html .= '<!DOCTYPE html><html><body style="font-family:Arial, sans-serif; font-size:14px; color:#111827;">';
        $html .= '<p>Bonjour,</p>';
        $html .= '<p>Vous &ecirc;tes invit&eacute; &agrave; un rendez-vous : <strong>' . htmlspecialchars($titre, ENT_QUOTES, 'UTF-8') . '</strong></p>';
        $html .= '<p>Date : <strong>' . htmlspecialchars($date, ENT_QUOTES, 'UTF-8') . ($heure ? (' &agrave; ' . htmlspecialchars($heure, ENT_QUOTES, 'UTF-8')) : '') . '</strong></p>';
        if ($duree && $duree > 0) {
            $html .= '<p>Dur&eacute;e : <strong>' . (int)$duree . ' minutes</strong></p>';
        }
        if ($description !== '') {
            $html .= '<p><strong>Description :</strong><br>' . nl2br(htmlspecialchars($description, ENT_QUOTES, 'UTF-8')) . '</p>';
        }
        $html .= '<p style="margin:16px 0 10px 0;">Pour r&eacute;pondre &agrave; cette invitation :</p>';
        $html .= '<p style="margin:0 0 16px 0;">';
        $html .= '<a href="' . $acceptUrlHtml . '" style="display:inline-block;margin-right:8px;padding:8px 14px;background-color:#1769aa;color:#ffffff;text-decoration:none;border-radius:6px;font-weight:600;">Accepter</a>';
        $html .= '<a href="' . $refuseUrlHtml . '" style="display:inline-block;padding:8px 14px;background-color:#e63946;color:#ffffff;text-decoration:none;border-radius:6px;font-weight:600;">Refuser</a>';
        $html .= '</p>';
        $html .= '<p style="font-size:12px;color:#6b7280;">En cas de difficult&eacute; pour cliquer sur les boutons, vous pouvez copier/coller ces liens dans votre navigateur :<br>';
        $html .= '<span style="word-break:break-all;">Accepter : ' . $acceptUrlHtml . '</span><br>';
        $html .= '<span style="word-break:break-all;">Refuser : ' . $refuseUrlHtml . '</span></p>';
        $html .= '<p style="font-size:12px;color:#6b7280;">Vous pouvez ajouter ce rendez-vous &agrave; votre calendrier en ouvrant la pi&egrave;ce jointe.</p>';
        $html .= '</body></html>';

        // Multipart/alternative (texte + HTML) à l'intérieur du multipart/mixed
        $altBoundary = '=_CRM_RDV_ALT_' . md5((string) microtime(true));

        $body = '';
        // Partie alternative texte / HTML
        $body .= '--' . $boundary . "\r\n";
        $body .= 'Content-Type: multipart/alternative; boundary="' . $altBoundary . '"' . "\r\n\r\n";

        // Texte brut
        $body .= '--' . $altBoundary . "\r\n";
        $body .= "Content-Type: text/plain; charset=\"utf-8\"\r\n";
        $body .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
        $body .= $plain . "\r\n";

        // HTML
        $body .= '--' . $altBoundary . "\r\n";
        $body .= "Content-Type: text/html; charset=\"utf-8\"\r\n";
        $body .= "Content-Transfer-Encoding: 8bit\r\n\r\n";
        $body .= $html . "\r\n";

        // Fin de la partie alternative
        $body .= '--' . $altBoundary . "--\r\n";

        // Pièce jointe calendrier
        $body .= '--' . $boundary . "\r\n";
        $body .= "Content-Type: text/calendar; method=REQUEST; charset=\"utf-8\"\r\n";
        $body .= "Content-Transfer-Encoding: 8bit\r\n";
        $body .= "Content-Disposition: attachment; filename=\"rdv.ics\"\r\n\r\n";
        $body .= $ics . "\r\n";
        $body .= '--' . $boundary . "--\r\n";

        @mail($email, $subject, $body, $headersStr);
    }
}

$model = new RdvModel();
$projectLinkModel = new ProjetDocumentLink();

$method = $_SERVER['REQUEST_METHOD'];

switch ($method) {
    case 'GET':
        if (isset($_GET['id'])) {
            $rdv = $model->getRdvById($_GET['id']);
            if ($rdv) {
                $projectLink = $projectLinkModel->getForEntity('rdv', (int) ($rdv['id'] ?? 0));
                if ($projectLink) {
                    $rdv['linked_project_id'] = (int) ($projectLink['projet_id'] ?? 0);
                    $rdv['linked_project_title'] = (string) ($projectLink['projet_titre'] ?? '');
                }
                echo json_encode(['success' => true, 'rdv' => $rdv]);
            } else {
                echo json_encode(['success' => false, 'error' => 'RDV introuvable']);
            }
        } else {
            // ?start=YYYY-MM-DD&end=YYYY-MM-DD
            $start = $_GET['start'] ?? date('Y-m-d');
            $end = $_GET['end'] ?? date('Y-m-d', strtotime('+14 days'));
            $rdvs = $model->getRdvByRange($start, $end);

            $ids = array_map(function($r){ return (int)($r['id'] ?? 0); }, $rdvs);
            $inviteModel = new RdvInviteModel();
            $stats = $inviteModel->getStatsForRdvIds($ids);
            foreach ($rdvs as &$r) {
                $rid = (int)($r['id'] ?? 0);
                if (isset($stats[$rid])) {
                    $r['invite_accepted_count'] = $stats[$rid]['accepted_count'];
                    $r['invite_refused_count'] = $stats[$rid]['refused_count'];
                    $r['invite_accepted_emails'] = $stats[$rid]['accepted_emails'];
                    $r['invite_refused_emails'] = $stats[$rid]['refused_emails'];
                } else {
                    $r['invite_accepted_count'] = 0;
                    $r['invite_refused_count'] = 0;
                    $r['invite_accepted_emails'] = [];
                    $r['invite_refused_emails'] = [];
                }
            }
            unset($r);
            echo json_encode(['success' => true, 'rdvs' => $rdvs]);
        }
        break;
    case 'POST':
        $data = json_decode(file_get_contents('php://input'), true);
        $titre = $data['titre'] ?? '';
        $date = $data['date'] ?? '';
        $heure = $data['heure'] ?? null;
        $duree = $data['duree'] ?? null;
        $description = $data['description'] ?? null;
        $statut = $data['statut'] ?? 'a_faire';
        $inviteEmails = $data['invite_emails'] ?? '';
        $linkedProjectId = isset($data['linked_project_id']) ? (int) $data['linked_project_id'] : 0;
        if ($titre && $date) {
            $id = $model->addRdv($titre, $date, $heure, $duree, $description, $statut, $inviteEmails);
            $projectLinkModel->assign($linkedProjectId > 0 ? $linkedProjectId : null, 'rdv', (int) $id);
            crm_send_rdv_invitations([
                'id' => $id,
                'titre' => $titre,
                'date' => $date,
                'heure' => $heure,
                'duree' => $duree,
                'description' => $description,
                'invite_emails' => $inviteEmails,
            ]);
            echo json_encode(['success' => true, 'id' => $id]);
        } else {
            echo json_encode(['success' => false, 'error' => 'Champs obligatoires manquants']);
        }
        break;
    case 'PUT':
        $data = json_decode(file_get_contents('php://input'), true);
        $id = $data['id'] ?? null;
        $titre = $data['titre'] ?? '';
        $date = $data['date'] ?? '';
        $heure = $data['heure'] ?? null;
        $duree = $data['duree'] ?? null;
        $description = $data['description'] ?? null;
        $statut = $data['statut'] ?? 'a_faire';
        $inviteEmails = $data['invite_emails'] ?? '';
        $linkedProjectId = isset($data['linked_project_id']) ? (int) $data['linked_project_id'] : 0;
        if ($id && $titre && $date) {
            $ok = $model->updateRdv($id, $titre, $date, $heure, $duree, $description, $statut, $inviteEmails);
            if ($ok) {
                $projectLinkModel->assign($linkedProjectId > 0 ? $linkedProjectId : null, 'rdv', (int) $id);
                // Only send invitations when invite_emails has been added/changed (status-only changes should not resend invites)
                $existing = $model->getRdvById($id);
                $oldRaw = trim((string)($existing['invite_emails'] ?? ''));
                $newRaw = trim((string)($inviteEmails ?? ''));
                if ($newRaw !== '' && $newRaw !== $oldRaw) {
                    crm_send_rdv_invitations([
                        'id' => $id,
                        'titre' => $titre,
                        'date' => $date,
                        'heure' => $heure,
                        'duree' => $duree,
                        'description' => $description,
                        'invite_emails' => $inviteEmails,
                    ]);
                }
            }
            echo json_encode(['success' => $ok]);
        } else {
            echo json_encode(['success' => false, 'error' => 'Champs obligatoires manquants']);
        }
        break;
    case 'DELETE':
        $data = json_decode(file_get_contents('php://input'), true);
        $id = $data['id'] ?? null;
        if ($id) {
            $projectLinkModel->deleteByEntity('rdv', (int) $id);
            $ok = $model->deleteRdv($id);
            echo json_encode(['success' => $ok]);
        } else {
            echo json_encode(['success' => false, 'error' => 'ID manquant']);
        }
        break;
    default:
        echo json_encode(['success' => false, 'error' => 'Méthode non supportée']);
}