Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
64 lines
2.1 KiB
PHP
64 lines
2.1 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../lib/auth.php';
|
|
require_once __DIR__ . '/../lib/mail.php';
|
|
require_login();
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
|
|
header('Location: ../pages/benefitsantrag.php');
|
|
exit;
|
|
}
|
|
|
|
$back = '../pages/benefitsantrag.php';
|
|
|
|
$benefit = trim($_POST['benefit'] ?? '');
|
|
$nachricht = trim($_POST['nachricht'] ?? '');
|
|
|
|
$allowed_benefits = ['yoga', 'autogenes_training', 'massage', 'tankgutschein', 'online_gutscheine'];
|
|
if (!in_array($benefit, $allowed_benefits, true)) {
|
|
if (!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] === 'XMLHttpRequest') {
|
|
header('Content-Type: application/json');
|
|
http_response_code(400);
|
|
echo json_encode(['ok' => false, 'error' => 'Bitte einen Benefit auswählen.']);
|
|
exit;
|
|
}
|
|
header('Location: ' . $back . '?error=' . urlencode('Bitte einen Benefit auswählen.'));
|
|
exit;
|
|
}
|
|
|
|
$user_id = current_user()['id'];
|
|
$now = date('c');
|
|
|
|
db()->prepare(
|
|
'INSERT INTO requests_benefitsantrag (user_id, status, admin_note, created_at, updated_at, benefit, nachricht)
|
|
VALUES (?, \'pending\', \'\', ?, ?, ?, ?)'
|
|
)->execute([$user_id, $now, $now, $benefit, $nachricht]);
|
|
|
|
$benefit_labels = [
|
|
'yoga' => 'Yoga',
|
|
'autogenes_training' => 'Autogenes Training',
|
|
'massage' => 'Massage',
|
|
'tankgutschein' => 'Tankgutschein',
|
|
'online_gutscheine' => 'Online-Gutscheine',
|
|
];
|
|
|
|
$config = require __DIR__ . '/../lib/config.php';
|
|
smtp_send(
|
|
$config,
|
|
$config['mail_info'],
|
|
'Neuer Benefitsantrag: ' . current_name(),
|
|
"Ein Benefitsantrag wurde eingereicht.\n\n"
|
|
. 'Mitarbeiter: ' . current_name() . "\n"
|
|
. 'Benefit: ' . ($benefit_labels[$benefit] ?? $benefit) . "\n"
|
|
. 'Nachricht: ' . ($nachricht ?: '—') . "\n\n"
|
|
. "---\nGesendet über OMSORG Connect"
|
|
);
|
|
|
|
if (!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && $_SERVER['HTTP_X_REQUESTED_WITH'] === 'XMLHttpRequest') {
|
|
header('Content-Type: application/json');
|
|
echo json_encode(['ok' => true, 'benefit' => $benefit]);
|
|
exit;
|
|
}
|
|
|
|
header('Location: ' . $back . '?success=1');
|
|
exit;
|