Felix KemmlerandClaude Sonnet 5
b6c1389c55
Consolidates the previously separate omsorgapp and omsorgCore repos (each had their own nested .git with GitHub history) plus the old root-level website/mitarbeiter-app into a single monorepo, matching the structure already documented in the root CLAUDE.md. Also moves the PHP employee app aside as omsorgWeb/mitarbeiter-app-legacy/ to serve as a template for a ground-up rewrite. Fixes .gitignore in the same pass: the config-secrets/uploads/data patterns were unanchored (relative to repo root, not depth-agnostic), so they silently stopped matching once the app moved under omsorgWeb/. Patterns are now **/-prefixed and cover both mitarbeiter-app and mitarbeiter-app-legacy, keeping DB/SMTP credentials and uploaded employee documents out of version control. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
64 lines
2.0 KiB
PHP
64 lines
2.0 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../lib/auth.php';
|
|
require_once __DIR__ . '/../lib/upload.php';
|
|
require_once __DIR__ . '/../lib/mail.php';
|
|
require_login();
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
|
|
header('Location: ../pages/stundennachweis.php');
|
|
exit;
|
|
}
|
|
|
|
$back = '../pages/stundennachweis.php';
|
|
$monat_m = trim($_POST['monat_m'] ?? '');
|
|
$monat_j = trim($_POST['monat_j'] ?? '');
|
|
|
|
if (!preg_match('/^\d{2}$/', $monat_m) || !preg_match('/^\d{4}$/', $monat_j)
|
|
|| (int)$monat_m < 1 || (int)$monat_m > 12
|
|
|| (int)$monat_j < 2020 || (int)$monat_j > 2099) {
|
|
redirect_error($back, 'Bitte einen gültigen Monat und ein gültiges Jahr auswählen.');
|
|
}
|
|
$monat = $monat_j . '-' . $monat_m;
|
|
|
|
$dir = dirname(__DIR__) . '/uploads/';
|
|
$up = handle_upload($_FILES['datei'] ?? [], [
|
|
'allowed' => UPLOAD_TYPES_PDF_IMG,
|
|
'dir' => $dir,
|
|
'prefix' => 'stundennachweis',
|
|
'messages' => [
|
|
'missing' => 'Bitte eine Datei hochladen.',
|
|
'ext' => 'Dateityp nicht erlaubt. Erlaubt: PDF, JPG, PNG.',
|
|
],
|
|
]);
|
|
if (!$up['ok']) {
|
|
redirect_error($back, $up['error']);
|
|
}
|
|
|
|
$safe_name = $up['filename'];
|
|
$original_name = $up['original_name'];
|
|
$mime = $up['mime'];
|
|
|
|
$user_id = current_user()['id'];
|
|
$now = date('c');
|
|
|
|
db()->prepare(
|
|
'INSERT INTO requests_stundennachweis
|
|
(user_id, status, admin_note, monat, filename, original_name, created_at, updated_at)
|
|
VALUES (?, \'pending\', \'\', ?, ?, ?, ?, ?)'
|
|
)->execute([$user_id, $monat, $safe_name, $original_name, $now, $now]);
|
|
|
|
$config = require __DIR__ . '/../lib/config.php';
|
|
smtp_send(
|
|
$config,
|
|
$config['mail_sabrina'],
|
|
'Neuer Stundennachweis: ' . current_name(),
|
|
"Ein Stundennachweis wurde hochgeladen.\n\n"
|
|
. 'Mitarbeiter: ' . current_name() . "\n"
|
|
. 'Monat: ' . $monat . "\n"
|
|
. 'Datei: ' . $original_name . "\n\n"
|
|
. "---\nGesendet über OMSORG Connect",
|
|
['path' => $dir . $safe_name, 'name' => $original_name, 'mime' => $mime]
|
|
);
|
|
|
|
redirect_ok($back);
|