Initial commit

2026-05-17 05:22:06 +03:00
commit ca4d00c895
155 changed files with 45216 additions and 0 deletions
@@ -0,0 +1,12 @@
+<?php
+header('Content-Type: application/json; charset=utf-8');
+
+require_once __DIR__ . '/../inc/auth.php';
+$session = auth_require('owner', 'engineer');
+
+$pdo = getDB();
+
+$stmt = $pdo->query("SELECT * FROM shs_records ORDER BY id DESC LIMIT 1");
+$shs = $stmt->fetch();
+
+echo json_encode($shs ?: ['error' => 'Нет данных']);
@@ -0,0 +1,23 @@
+<?php
+header('Content-Type: application/json; charset=utf-8');
+
+require_once __DIR__ . '/../inc/auth.php';
+$session = auth_require('engineer', 'technician');
+
+$pdo = getDB();
+$userId = $session['user_id'];
+$role = $session['user_role'];
+
+$sql = "SELECT t.*, o.name as object_name, o.address FROM tasks t JOIN objects o ON o.id=t.object_id WHERE t.status IN ('open','in_progress')";
+$params = [];
+
+if ($role === 'technician') {
+    $sql .= " AND t.assigned_to = ?";
+    $params[] = $userId;
+}
+
+$sql .= " ORDER BY FIELD(t.priority,'P1','P2','P3','P4'), t.deadline ASC";
+
+$stmt = $pdo->prepare($sql);
+$stmt->execute($params);
+echo json_encode($stmt->fetchAll());
@@ -0,0 +1,64 @@
+<?php
+header('Content-Type: application/json; charset=utf-8');
+
+require_once __DIR__ . '/../inc/auth.php';
+auth_session_start();
+
+if (empty($_SESSION['user_id'])) {
+    http_response_code(401);
+    echo json_encode(['error' => 'Не авторизован']);
+    exit;
+}
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST' || empty($_FILES['photo'])) {
+    http_response_code(400);
+    echo json_encode(['error' => 'Нет файла']);
+    exit;
+}
+
+$taskId = (int)($_POST['task_id'] ?? 0);
+$reportId = (int)($_POST['report_id'] ?? 0);
+$type = $_POST['type'] ?? 'other';
+$desc = trim($_POST['description'] ?? '');
+
+$uploadDir = __DIR__ . '/../uploads/';
+if (!is_dir($uploadDir)) {
+    mkdir($uploadDir, 0755, true);
+}
+
+$file = $_FILES['photo'];
+$ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
+$allowed = ['jpg','jpeg','png','gif','webp','heic'];
+
+if (!in_array($ext, $allowed)) {
+    http_response_code(400);
+    echo json_encode(['error' => 'Недопустимый формат. Разрешены: ' . implode(', ', $allowed)]);
+    exit;
+}
+
+if ($file['size'] > 20 * 1024 * 1024) {
+    http_response_code(400);
+    echo json_encode(['error' => 'Файл больше 20MB']);
+    exit;
+}
+
+$fileName = uniqid('photo_') . '.' . $ext;
+$destPath = $uploadDir . $fileName;
+
+if (!move_uploaded_file($file['tmp_name'], $destPath)) {
+    http_response_code(500);
+    echo json_encode(['error' => 'Ошибка сохранения файла']);
+    exit;
+}
+
+$dbPath = '/service/uploads/' . $fileName;
+
+try {
+    $pdo = getDB();
+    $stmt = $pdo->prepare("INSERT INTO task_photos (task_id, report_id, file_path, description, type, uploaded_by) VALUES (?,?,?,?,?,?)");
+    $stmt->execute([$taskId ?: null, $reportId ?: null, $dbPath, $desc, $type, $_SESSION['user_id']]);
+    echo json_encode(['success' => true, 'path' => $dbPath, 'id' => $pdo->lastInsertId()]);
+} catch (\Throwable $e) {
+    http_response_code(500);
+    echo json_encode(['error' => 'Ошибка БД: ' . $e->getMessage()]);
+}